Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33332d3333203d3e20323632383735.roa
File: 323830343a3939303a3a2f33332d3333203d3e20323632383735.roa (raw, json)
Hash identifier: Xv4ivzYJFN5Dj46tSvmBswrM7FpSgBPwNnBpCzFbpQ0=
Subject key identifier: 29:3F:B3:0C:B1:3C:65:C4:63:AE:5D:32:C4:EA:6C:89:1A:21:07:C1
Certificate issuer: /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial: 4A75FFD02F82755C555C2E97EDCC45FDDC8B8759
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33332d3333203d3e20323632383735.roa
Signing time: Thu 02 Jan 2025 13:11:48 +0000
ROA not before: Thu 02 Jan 2025 13:06:48 +0000
ROA not after: Thu 01 Jan 2026 13:11:48 +0000
asID: 262875
IP address blocks: 2804:990::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:75:ff:d0:2f:82:75:5c:55:5c:2e:97:ed:cc:45:fd:dc:8b:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Validity
Not Before: Jan 2 13:06:48 2025 GMT
Not After : Jan 1 13:11:48 2026 GMT
Subject: CN=293FB30CB13C65C463AE5D32C4EA6C891A2107C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:a2:52:c1:19:93:11:45:b0:c8:d6:fc:bf:
de:b2:0f:69:da:c6:0f:f4:f9:dd:90:48:5c:2d:53:
3e:5a:b1:b7:44:59:59:f7:06:30:fe:af:d3:b0:9a:
cf:9a:d0:c1:50:88:ed:48:e3:67:55:a5:37:30:52:
70:9f:56:eb:9b:41:7b:6a:e3:78:ca:ab:fb:ed:a7:
b0:d9:76:e0:53:ed:3a:f9:18:40:1b:a6:ca:22:f2:
09:ea:ef:92:16:8e:d9:4b:c2:58:5b:69:26:56:56:
4b:54:d3:c4:eb:56:3a:7c:03:ae:a1:f5:67:35:94:
73:57:84:b0:ad:63:3e:89:92:b5:3b:c9:96:08:bb:
c4:62:98:b3:fa:dc:2a:e7:84:97:3c:cf:f7:b3:95:
73:e3:44:8b:fe:a6:8e:de:2e:9f:2c:29:ee:8a:bd:
55:e1:30:9a:f7:f6:b3:e0:90:23:eb:15:5f:18:c7:
8d:09:11:c4:df:1c:2d:35:64:b8:9b:bc:7a:53:7b:
b6:e3:2c:5a:01:35:07:c0:3e:28:70:fb:d4:63:0d:
58:0b:87:d1:a3:56:05:81:05:9f:49:aa:c6:f8:d9:
f6:f5:e1:e6:f6:5a:3a:55:33:e9:e1:f2:99:cc:95:
5d:e8:f8:aa:1a:19:d5:de:15:65:6b:7c:b4:ec:4c:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:B3:0C:B1:3C:65:C4:63:AE:5D:32:C4:EA:6C:89:1A:21:07:C1
X509v3 Authority Key Identifier:
keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33332d3333203d3e20323632383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:990::/33
Signature Algorithm: sha256WithRSAEncryption
94:74:68:88:ba:a5:cd:a4:e6:58:f2:87:5e:68:4f:73:2d:3f:
c9:9e:a1:5e:6b:85:9e:62:03:1e:e3:bf:6a:b9:b8:46:28:42:
01:08:39:20:8d:69:65:b0:3b:45:0c:80:6e:b6:41:cc:b1:62:
eb:c1:e0:6b:bc:d9:3d:a2:b5:6e:e2:69:9b:08:61:1c:6e:b3:
43:d4:31:c1:c1:34:31:1b:3a:17:88:6b:e1:27:36:64:e9:d3:
8a:02:70:c9:ef:87:87:c5:43:e1:0d:3e:50:01:9c:31:76:b6:
be:b2:5f:25:69:97:87:02:f2:8c:5b:c9:cd:78:70:d2:92:75:
79:e7:bb:5c:47:f0:eb:cf:0d:16:46:4a:ce:0a:97:2e:f8:1d:
be:d6:0b:45:49:cb:d9:73:b5:97:f0:01:d5:f7:14:93:a5:a0:
89:11:36:85:14:02:09:c5:90:56:e8:12:ea:1f:af:04:f7:31:
0d:b7:a2:f9:04:6f:81:83:f0:f0:c8:30:79:9f:f9:a9:da:36:
35:d2:fc:6b:81:b7:ff:d7:1a:4d:42:aa:9f:5e:67:60:bd:0e:
23:02:fb:e5:4a:84:6c:c1:d4:7e:3e:dd:6b:8b:d8:e6:15:e4:
c5:35:53:da:10:08:4c:0b:b7:40:85:dd:7f:69:1a:71:fe:93:
3d:2e:86:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSnX/0C+CdVxVXC6X7cxF/dyLh1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDMTI2RTIwNkQwODQzMEExM0VEQTJERkVBOUI2RjlD
NjFCQkY0MTAeFw0yNTAxMDIxMzA2NDhaFw0yNjAxMDExMzExNDhaMDMxMTAvBgNV
BAMTKDI5M0ZCMzBDQjEzQzY1QzQ2M0FFNUQzMkM0RUE2Qzg5MUEyMTA3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuKJSwRmTEUWwyNb8v96yD2na
xg/0+d2QSFwtUz5asbdEWVn3BjD+r9Owms+a0MFQiO1I42dVpTcwUnCfVuubQXtq
43jKq/vtp7DZduBT7Tr5GEAbpsoi8gnq75IWjtlLwlhbaSZWVktU08TrVjp8A66h
9Wc1lHNXhLCtYz6JkrU7yZYIu8RimLP63CrnhJc8z/ezlXPjRIv+po7eLp8sKe6K
vVXhMJr39rPgkCPrFV8Yx40JEcTfHC01ZLibvHpTe7bjLFoBNQfAPihw+9RjDVgL
h9GjVgWBBZ9Jqsb42fb14eb2WjpVM+nh8pnMlV3o+KoaGdXeFWVrfLTsTENNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKT+zDLE8ZcRjrl0yxOpsiRohB8EwHwYDVR0j
BBgwFoAU6sEm4gbQhDChPtot/qm2+cYbv0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDdaY3QyNW1TZml0UnBCTjJvWGhMUEc1bmp2WlRRc2tIOEwybk5Idmhh
WmUvMC9FQUMxMjZFMjA2RDA4NDMwQTEzRURBMkRGRUE5QjZGOUM2MUJCRjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzEyNkUyMDZEMDg0MzBB
MTNFREEyREZFQTlCNkY5QzYxQkJGNDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3WmN0MjVtU2ZpdFJwQk4yb1hoTFBHNW5qdlpUUXNrSDhMMm5OSHZoYVplLzAv
MzIzODMwMzQzYTM5MzkzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM4
MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygECZAAMA0GCSqGSIb3DQEBCwUAA4IBAQCUdGiIuqXN
pOZY8odeaE9zLT/JnqFea4WeYgMe479qubhGKEIBCDkgjWllsDtFDIButkHMsWLr
weBrvNk9orVu4mmbCGEcbrND1DHBwTQxGzoXiGvhJzZk6dOKAnDJ74eHxUPhDT5Q
AZwxdra+sl8laZeHAvKMW8nNeHDSknV557tcR/Drzw0WRkrOCpcu+B2+1gtFScvZ
c7WX8AHV9xSTpaCJETaFFAIJxZBW6BLqH68E9zENt6L5BG+Bg/DwyDB5n/mp2jY1
0vxrgbf/1xpNQqqfXmdgvQ4jAvvlSoRswdR+Pt1ri9jmFeTFNVPaEAhMC7dAhd1/
aRpx/pM9LoZv
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:09 2025 by rpki-client